Managing near field communication (NFC) payment applications through cloud computing

This thesis was submitted for the degree of Doctor of Philosophy and awarded by Brunel University.The Near Field Communication (NFC) technology is a short-range radio communication channel which enables users to exchange data between devices. NFC provides a contactless technology for data transmission between smart phones, Personal Computers (PCs), Personal Digital Assistants (PDAs) and such devices. It enables the mobile phone to act as identification and a credit card for customers. However, the NFC chip can act as a reader as well as a card, and also be used to design symmetric protocols. Having several parties involved in NFC ecosystem and not having a common standard affects the security of this technology where all the parties are claiming to have access to client’s information (e.g. bank account details). The dynamic relationships of the parties in an NFC transaction process make them partners in a way that sometimes they share their access permissions on the applications that are running in the service environment. These parties can only access their part of involvement as they are not fully aware of each other’s rights and access permissions. The lack of knowledge between involved parties makes the management and ownership of the NFC ecosystem very puzzling. To solve this issue, a security module that is called Secure Element (SE) is designed to be the base of the security for NFC. However, there are still some security issues with SE personalization, management, ownership and architecture that can be exploitable by attackers and delay the adaption of NFC payment technology. Reorganizing and describing what is required for the success of this technology have motivated us to extend the current NFC ecosystem models to accelerate the development of this business area. One of the technologies that can be used to ensure secure NFC transactions is cloud computing which offers wide range advantages compared to the use of SE as a single entity in an NFC enabled mobile phone. We believe cloud computing can solve many issues in regards to NFC application management. Therefore, in the first contribution of part of this thesis we propose a new payment model called “NFC Cloud Wallet". This model demonstrates a reliable structure of an NFC ecosystem which satisfies the requirements of an NFC payment during the development process in a systematic, manageable, and effective way

Near Field Communication: From theory to practice

This book provides the technical essentials, state-of-the-art knowledge, business ecosystem and standards of Near Field Communication (NFC)by NFC Lab - Istanbul research centre which conducts intense research on NFC technology. In this book, the authors present the contemporary research on all aspects of NFC, addressing related security aspects as well as information on various business models. In addition, the book provides comprehensive information a designer needs to design an NFC project, an analyzer needs to analyze requirements of a new NFC based system, and a programmer needs to implement an application. Furthermore, the authors introduce the technical and administrative issues related to NFC technology, standards, and global stakeholders. It also offers comprehensive information as well as use case studies for each NFC operating mode to give the usage idea behind each operating mode thoroughly. Examples of NFC application development are provided using Java technology, and security considerations are discussed in detail. Key Features: Offers a complete understanding of the NFC technology, including standards, technical essentials, operating modes, application development with Java, security and privacy, business ecosystem analysis Provides analysis, design as well as development guidance for professionals from administrative and technical perspectives Discusses methods, techniques and modelling support including UML are demonstrated with real cases Contains case studies such as payment, ticketing, social networking and remote shopping This book will be an invaluable guide for business and ecosystem analysts, project managers, mobile commerce consultants, system and application developers, mobile developers and practitioners. It will also be of interest to researchers, software engineers, computer scientists, information technology specialists including students and graduates.Publisher's Versio

Banking the unbanked using prepaid platforms and mobile telephones in the United States

The rapid growth of mobile phone usage and the continuous rise in wireless coverage fuel the expectations that access to financial services trough mobile phones could transform the way financial services are provided. The emergence of new and more efficient business models, can potentially resolve supply inefficiencies that explain the large unbanked population that exists in the USA, much larger than in most developed countries. Nearly 40 million US households (approximately 73 million people) are financially underserved (CFSI, 2007), of which 15 million households (approximately 28 million people) are totally unbanked. This problem is explained by the non adequacy of the value proposals offered by financial institutions to the demands of the US customers. The areas of poor alignment refer mostly to the design of products and the marketing and distribution networks used. To resolve these misalignments, this paper will argue that business models based on prepaid cards as products and mobile phones as transactional and distribution channels could be used in order to close the supply gap. We will call the business model proposed based on prepaid products and mobile phones mobile banking, since these two elements are the basis of the business model used companies such as Smart Money and G-Cash in the Phillipines, Wizzit in South Africa and M-Pesa in Kenya.prepaid platform; unbanked; financial services; mobile phones; prepaid cards;

Extending Mobile Wallet That Utilizes NFC

In recent years, the purpose of a mobile phone has been redefined. Mobile users are expecting that one day they can get away with their physical wallet. Mobile phone can virtually store all the content of the physical wallet like transit cards, identity cards including the credit/debit cards so that payments can be made easily, quickly, and securely with a mobile phone. Mobile payments have been in use for the past couple of years and gaining momentum as more mobile phones are shipped with Near Field Communication (NFC) support. NFC-enabled mobile phones could play a key role in day-to-day life, serving as wallet, loyalty cards, access cards, and travel cards. This thesis first explains Mobile Wallet concepts and different mobile payment types, while focusing on payments using Near Field Communication. Second, this thesis discusses the current leading Mobile Wallet solutions. Finally, the Star Bonus service is introduced by which users can see their past transactions and summary of their accrued bonus points. Star Bonus service is a value-added service to the Mobile Wallet user. It was presented in Mobile World Congress-2014, 2015 and received good feedback. By integrating the loyalty card into the Mobile Wallet payment use case, Star Bonus makes payments easier and quicker. The positive response it garnered highlights the importance of adding value-added services to Mobile Wallet

Near Field Communication Applications

Near Field Communication (NFC) is a short-range, low power contactless communication between NFC-enabled devices that are held in the closed proximity to each other. NFC technology has been moving rapidly from its initial application areas of mobile payment services and contactless ticketing to the diversity of new areas. Three specific NFC tags highlighted in the thesis have different structures in terms of memory, security and usage in different applications. NFC information tags exploit the data exchange format NDEF standardized by NFC Forum. NFC applications are rapidly stepping into novel and diverse application areas. Often they are deployed in combination with different devices and systems through their integrability and adaptability features. The diverse application areas where NFC tags and cards are used cover smart posters, contactless ticketing, keys and access control, library services, entertainment services, social network services, education, location based services, work force and retail management and healthcare. In designing different NFC applications, it is necessary to take into consideration different design issues such as to choosing the NFC tools and devices according to the technical requirements of the application, considering especially the memory, security and price factors as well as their relation to the purpose and usage of the final product. The security aspect of the NFC tags is remarkably important in selecting the proper NFC device. The race between hackers attacking and breaking the security systems of programmable high level products and manufacturers to produce reliable secure systems and products seems to never end. This has proven to be case, for example, for trying MIFARE Ultralight and DESFire MF3ICD40 tags. An important consideration of studying the different applications of NFC tags and cards during the thesis work was to understand the ubiquitous character of NFC technology.Lähitunnistus yhteys tekniikka (NFC) on lyhyen tähtäimen, pienitehoinen, kontaktiton yhteydenpito NFC yhteensopivien laitteiden välillä, jossa laitteet pidetään toistensä välittömässä läheisyydessä tiedon siirtämiseksi niiden välillä. NFC-teknologia on siirtynyt nopeasti sen alkuperäisiltä toimialueilta eli mobiili maksupalvelujen ja kontaktittomien lippujen sovellusalueilta moninaisille uusille alueille. Kolmella NFC tagillä, joita on käsitelty tässä tutkielmassa, on muistin, turvallisuuden ja käytön kannalta erilaisiä rakenteita, joita käytetään eri sovelluksissa. NFC-tagit käyttävät tiedonvälityksessä NFC Forumin standardoimaa NDEF-tiedonvaihtoformaattia. NFC sovellukset esiintyvät yhä enenevässä määrin nopeasti kehyttyvillä, uudenlaisilla ja monipuolisilla sovellusalueilla, usein yhdessä eri laitteiden ja järjestelmien kanssa. NFC on käytettävissä erinäisten laitteiden kanssa erilaisissa järjestelmäympäristöissä. Monipuoliset sovellusalueet, joissa muun muassa NFC-tagejä ja -kortteja käytetään sisältävät seuraavanlaisia sovelluksia: älykkäät julisteet, kontaktittomat liput, avaimet ja pääsynvalvonta, kirjastopalvelut, viihdepalvelut, sosiaalisen verkoston palvelut, kasvatukseen ja koulutukseen liittyvät palvelut, sijaintiperustaiset palvelut, työvoiman ja vähittäiskaupan hallinto-palvelut ja terveyspalvelut. Erilaisten NFC-sovelluksien suunnittelussa on väistämätöntä ottaa erilaisia suunnitteluasioita huomioon kuten valita NFC-työkalut ja laitteet sovelluksen teknisten vaatimusten mukaan. Erilaiset tärkeät tekijät kuten muisti, tietoturvallisuusominaisuudet ja hinta ja niiden kaikkien toimivuus lopputuotteen kannalta on otettava huomioon. Tietoturvallisuusnäkökohta on erityisen tärkeä oikean NFC laitteen valitsemisessa, sillä käynnissä on loputon kilpajuoksu hakkerien, jotka yrittävät rikkoa ohjelmoitavien korkeatasoisten laitteiden ja tuotteiden tietoturvajärjestelmiä, ja valmistajien, jotka pyrkivät tuottamaan luotettavia varmoja järjestelmiä, välillä. Tietoturvariskiin liittyviä ongelmia on löydetty esimerkiksi MIFARE Ultralight ja DESFire MF3ICD40 tageista. Tärkeä havainto, joka saatiin erilaisten NFC sovelluksien tutkimisesta, oli oivaltaa NFCteknologian potentiaalinen kaikkialle ulottuva, yleiskäyttöinen luonne

Research on security factors of mobile payment: taking Alipay, the leader of China's third party payment, as an exemple

Mobile payment is one of the most crucial links in E-commerce. As a representative of third-party payment, Alipay has become the field of payment unicorn enterprises. The purpose of this thesis is to study the security factors affecting mobile payment taking Alipay as the specific research object. Based on the literature review, exploratory factor analysis (EFA) and structural equation model（SEM）analysis were used to conduct empirical research. Data were obtained by random sampling through a questionnaire（N=364） . Research shows that the "Knowledge" at the People aspect, the "System Function" and "Financial Security" at the organization aspect, and the "Transaction Platform" at the Technology aspects have a positive relationship with the safety of Alipay. Based on the above empirical analysis, this thesis puts forward some suggestions on how to improve the safety of AlipayO pagamento móvel é um dos links mais importantes no comércio eletrônico. Como representante de pagamento de terceiros, Alipay tornou-se o campo de empresas de unicórnio de pagamento. O objetivo desta tese é estudar os fatores de segurança que afetam o pagamento móvel tomando Alipay como objeto de pesquisa específico. Com base na revisão da literatura, a análise fatorial exploratória （EFA） e modelo de equações estruturais （SEM ） análise foram utilizados para realizar pesquisas empíricas. Os dados foram obtidos por amostragem aleatória através de um questionário （N = 364） . A pesquisa mostra que o "Conhecimento" no aspecto Pessoas, a "Função do Sistema" e a "Segurança Financeira" no aspecto da organização, e a "Plataforma de Transação" no aspecto Tecnologia têm uma relação positiva com a segurança do Alipay. Com base na análise empírica acima, esta tese apresenta algumas sugestões sobre como melhorar a segurança do Alipay

The survey on Near Field Communication

PubMed ID: 26057043Near Field Communication (NFC) is an emerging short-range wireless communication technology that offers great and varied promise in services such as payment, ticketing, gaming, crowd sourcing, voting, navigation, and many others. NFC technology enables the integration of services from a wide range of applications into one single smartphone. NFC technology has emerged recently, and consequently not much academic data are available yet, although the number of academic research studies carried out in the past two years has already surpassed the total number of the prior works combined. This paper presents the concept of NFC technology in a holistic approach from different perspectives, including hardware improvement and optimization, communication essentials and standards, applications, secure elements, privacy and security, usability analysis, and ecosystem and business issues. Further research opportunities in terms of the academic and business points of view are also explored and discussed at the end of each section. This comprehensive survey will be a valuable guide for researchers and academicians, as well as for business in the NFC technology and ecosystem.Publisher's Versio

Trends in mobile payments research: A literature review

Mobile payments (m-payments) are increasingly being adopted by organisations as a new way of doing business in the 21st century. During the last few years, the use of m-payments as a new payment channel has resulted in an increase in the volume of literature dedicated to the topic. For this reason, this paper presents the findings of a review of literature aimed at identifying the key research themes and methodologies researched. In order to uncover these trends the authors reviewed the top twenty cited papers since 1999 and the twenty most recently published papers on m-payments since August 2014

Forder Application

Dissertação de Mestrado em Engenharia InformáticaIn Portugal eating out is a part of the lifestyle. People meet in coffee shops and restaurants, creating business opportunities for the owners of the places. In the summer season there are many bars that open their terrace service. Like many business, there are some ‘quiet times’ during the day – moments, when the place doesn’t receive so many clients. This project proposes an idea on how to maintain the efficiency of the outdoor service with possibly lower costs for the company. The application presented in the given project enables clients to make their requests directly from the table using a cellphone. In the next step the employee receives a notification with the request and he can prepare and deliver the order. Combining Proximity Communication Technologies and a web and mobile application, the communication between a client and an employee may turn out to be fast and comfortable. This solution can have an impact on the number of employees during a calmer time. It is also expected that the client will be able to receive his order in the faster way, through the implemented innovation